Silk Road forums
Support => Bug reports => Topic started by: Stealth Kr00zer on April 22, 2013, 05:08 am
-
I noticed the index.php was showing up in the path for all the pages on SR yesterday after it was down for maintenance. I just assumed the web root had been moved to a fresh server install and that it would be corrected shortly. It is still showing up in the path. Maybe this is deliberate, but either the mod_rewrite module is commented out on the server config, or the RewriteRule entries are broken, or haven't been added to .htaccess.
It's probably not a big deal, but if you have certain pages bookmarked, it breaks the bookmarks. It might also make people think something is fishy. Usually if you see a path that you aren't used to seeing, it's a sign your connection is being hijacked. Obviously with onion sites this is unlikely, as an attacker would need the private key.
If everything was moved to a completely different web server. Like from lighttpd to nginx. That would break some of the rules. If I recall correctly SR used to show that it was running on lighttpd. It just said "server" last time I checked.
If the server has been changed, that would also best explain some of the other issues people have been bringing up.
I don't know who is the best person to report this to, but from what I can tell it doesn't appear to cause any vulnerability that would warrant a refrain from public disclosure.
-
I will pass this along to DPR.
-
Thanks scout. Hopefully, if it was due to a switch from lighttpd to nginx, it means server load will scale better now. Nginx takes advantage of mufti-threading, by delegating out worker processes when necessary. This can really make a big difference on VPS hosts. Nginx can be a bitch to get fully set up correctly though if you haven't used it before.